Static task
static1
Behavioral task
behavioral1
Sample
464dd53bbb264e33e93d656c1f0bef5bb9187158c7d4a73b55e883442c35e82d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
464dd53bbb264e33e93d656c1f0bef5bb9187158c7d4a73b55e883442c35e82d.exe
Resource
win10v2004-20220901-en
General
-
Target
464dd53bbb264e33e93d656c1f0bef5bb9187158c7d4a73b55e883442c35e82d
-
Size
220KB
-
MD5
5a1c308a9b3a3e52c947dfa8d9ad86dc
-
SHA1
2daf6b035e2c9b0ea7b77d55982a4335abf1a026
-
SHA256
464dd53bbb264e33e93d656c1f0bef5bb9187158c7d4a73b55e883442c35e82d
-
SHA512
74d33c53e4728c748275f37e0a13953677f9c23e0a3c6474bb3701c40a4ccaf8ad1c3e9625902b06ae0373b99cd8720cd52f753b33bddc2a1ae297e6ac6eae43
-
SSDEEP
3072:JgYXcChLcCl613/tdMJ9gzGwCuam/JoD00yJM8XK6QNak0m4lp78UF1/M8Y:5VhLcCrqXZJJM8XK6QNak0Jlu2FM8Y
Malware Config
Signatures
Files
-
464dd53bbb264e33e93d656c1f0bef5bb9187158c7d4a73b55e883442c35e82d.exe windows x86
bbdab17f7dd484be0a8aa7554344fbfe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
WideCharToMultiByte
FreeResource
LockResource
LoadResource
FindResourceA
GetPrivateProfileIntA
CloseHandle
TerminateThread
Sleep
lstrcmpiA
GetVersion
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
WritePrivateProfileStringA
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetVersionExA
GetACP
LoadLibraryA
GetPrivateProfileStringA
lstrcmpA
FreeLibrary
_lopen
GetFileSize
GetProcessHeap
HeapAlloc
_lread
HeapFree
LocalFree
LocalAlloc
FindFirstFileA
SetFileAttributesA
FindNextFileA
FindClose
RemoveDirectoryA
MultiByteToWideChar
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
lstrcatA
_lcreat
_lwrite
_lclose
DeleteFileA
GetModuleFileNameA
lstrlenA
lstrcpyA
OpenFile
WriteFile
LCMapStringW
user32
ValidateRect
CheckMenuItem
GetWindowRect
ExitWindowsEx
EnableMenuItem
SetWindowLongA
SetMenuItemInfoA
AppendMenuA
GetMenuItemInfoA
TrackPopupMenuEx
RemoveMenu
GetMenuItemCount
ReleaseDC
GetDC
GetDesktopWindow
SetWindowTextA
EndPaint
BeginPaint
MoveWindow
GetWindowLongA
SetRect
FillRect
InvalidateRect
TrackPopupMenu
GetCursorPos
GetDlgItemTextA
SendMessageA
ScreenToClient
SetWindowPos
CreateWindowExA
SetDlgItemTextA
CheckRadioButton
LoadBitmapA
SetDlgItemInt
CheckDlgButton
IsDlgButtonChecked
EnableWindow
SetTimer
KillTimer
EndDialog
GetDlgItem
GetMenu
LoadIconA
LoadImageA
GetClientRect
wsprintfA
LoadMenuA
GetSubMenu
CreatePopupMenu
DialogBoxParamA
DestroyMenu
LoadStringA
gdi32
CreateSolidBrush
GetTextExtentPoint32A
GetObjectA
CreateCompatibleBitmap
DeleteObject
GdiFlush
DeleteDC
BitBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
StretchBlt
CreateDIBSection
comdlg32
GetOpenFileNameA
advapi32
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegOpenKeyExA
shell32
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ole32
CoCreateInstance
comctl32
CreateToolbarEx
ord17
msvfw32
ICInfo
ICGetInfo
ICOpen
ICCompress
ICSendMessage
ICClose
avifil32
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamWrite
AVIFileOpenA
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIFileInit
AVIStreamSetFormat
msacm32
acmStreamConvert
acmStreamOpen
acmStreamPrepareHeader
acmStreamUnprepareHeader
acmStreamClose
acmDriverEnum
acmDriverDetailsA
acmDriverOpen
acmFormatEnumA
acmDriverClose
acmMetrics
mpegsys
ord51
ord34
ord46
ord36
mmxaudio
ord82
ord79
svdvideo
ord101
ord84
ord102
ord87
ord82
ord100
ord83
ord75
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE